]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
devfs.rules: unhide pf in vnet jails
authorKristof Provost <kp@FreeBSD.org>
Mon, 5 Oct 2020 19:26:54 +0000 (19:26 +0000)
committerKristof Provost <kp@FreeBSD.org>
Mon, 5 Oct 2020 19:26:54 +0000 (19:26 +0000)
commit9e9be081d8a6a3ded373db51c8bd13189c979979
tree57f3818fbf9b789a14860414afe373c0b056aeb3
parent2622708419596b59bab640acf2d7319e6070ccd4
devfs.rules: unhide pf in vnet jails

/dev/pf is usable in vnet jails, so don't hide the node there.

We shouldn't expose /dev/pf in regular jails, as that gives them control over
the host (or parent vnet jail) firewall.

Reviewed by: bz
Differential Revision: https://reviews.freebsd.org/D26537
sbin/devfs/devfs.rules